🟢 Low ⏱ 5–15 min Last verified: 15 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smb4k — Critical vulnerabilities in Mount Helper Related CVEs: CVE-2025-66002 CVE-2025-66003 Upstream summary: vulndb reports: A vulnerability, which was classified as critical, was found in smb4k up to 4.0.4. Affected […]
🟠 High ⏱ 15–60 min Last verified: 15 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MongoDB Server — Multiple vulnerabilities Related CVEs: CVE-2019-2386 CVE-2019-2389 CVE-2019-2390 CVE-2020-7921 CVE-2024-10921 CVE-2024-1351 CVE-2024-8654 CVE-2025-10059 +12 more Upstream summary: https://jira.mongodb.org/browse/SERVER-119981 reports: Computing the MD5 checksum of a malformed BSON object […]
🟢 Low ⏱ 5–15 min Last verified: 14 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unit — potential security issue Related CVEs: CVE-2019-7401 CVE-2025-1695 Upstream summary: The NGINX Unit team reports: Unit 1.34.2 fixes two issues in the Java language module websocket code. It addresses […]
🟢 Low ⏱ 5–15 min Last verified: 14 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lightdm-kde-greeter — Privilege Escalation from lightdm Service User to root Related CVEs: CVE-2025-62876 Upstream summary: SUSE Security Team reports: A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: step-certificates — Authorization Bypass in ACME and SCEP Provisioners Related CVEs: CVE-2025-44005 Upstream summary: smallstep reports: An attacker can bypass authorization checks and force a Step CA ACME or SCEP […]
🟡 Medium ⏱ 10–30 min Last verified: 11 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxslt — multiple vulnerabilities Related CVEs: CVE-2016-1683 CVE-2016-1684 CVE-2024-55549 CVE-2025-11731 CVE-2025-24855 CVE-2025-7424 CVE-2025-7425 CVE-2025-9714 Upstream summary: Alan Coopersmith reports: On 6/16/25 15:12, Alan Coopersmith wrote: BTW, users of libxml2 may […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: privatebin XSS Related CVEs: CVE-2025-62796 Upstream summary: privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: privatebin XSS Related CVEs: CVE-2025-62796 Upstream summary: privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
